ZCode AI App Found to Upload Users' Git Histories Without Consent

Sep 18, 2026

AI Summary

A developer revealed that ZCode, an AI coding application from Z.ai, uploads users' entire Git histories and workspace data to Alibaba Cloud without user consent. This raises significant privacy concerns, as the encrypted data can only be accessed by Z.ai, not the users themselves.

On September 18, 2026, a developer published findings about ZCode, an AI coding app from Z.ai, indicating it uploads users' entire Git histories and workspace data to Alibaba Cloud.
The app encrypts the data and sends it to Aliyun OSS, with the encryption key only accessible to Z.ai, preventing users from decrypting their own data.
The uploaded data includes sensitive information such as deleted API keys and unreleased product plans, raising serious privacy issues.
The developer's post gained significant attention, with over 276,000 views, prompting discussions about the implications of closed-source AI tools.
Z.ai's privacy policy does not disclose the practice of uploading entire workspaces, leading to concerns about transparency and user consent.
Users can prevent uploads by making specific directories unwritable at the filesystem level, but this disables certain features of the app.
The incident highlights the importance of understanding what data AI tools transmit and who can access it, emphasizing the need for transparency in AI applications.

glmscoding agentgit historyzcodesoftware development

ZCode AI App Found to Upload Users' Git Histories Without Consent

Related Stories

Synthesia Creates Interactive Digital Avatars for Personalized Communication

Meta's Muse AI outperforms ChatGPT as OpenAI and Anthropic release new models

Google Introduces Advanced Text-to-Speech Models for Custom Voice Creation

AI Chatbots Gain Popularity as Sources of Emotional Support and Guidance